CVE-2026-85620
Received Received - Intake

Postgres MCP Pro 0.3.0 Restricted-Mode Bypass via RangeFunction

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: VulnCheck

Description
Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pg_read_file through FROM-clause syntax to read arbitrary files despite restricted-mode protections.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-85620
EUVD
EUVD-2026-71227

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
crystaldba postgres_mcp to 0.3.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Postgres MCP Pro 0.3.0 has a vulnerability where function-name validation is skipped for RangeFunction nodes in FROM clauses. This allows attackers to bypass restricted-mode protections and execute file-reading functions like pg_read_file to read arbitrary files on the database host.

Detection Guidance

To detect this vulnerability, check if Postgres MCP Pro version 0.3.0 or earlier is installed. Verify if restricted-mode protections are bypassed by testing file-reading functions like pg_read_file in FROM clauses. Example command: SELECT * FROM pg_read_file('/etc/passwd'); If it returns file contents, the system is vulnerable.

Impact Analysis

An attacker could read sensitive files on the database server, such as /etc/passwd or other confidential data, even if the database is running in restricted mode. This could lead to information disclosure or further exploitation if combined with other vulnerabilities.

Compliance Impact

This vulnerability could violate compliance requirements like GDPR (data protection) or HIPAA (health data security) by enabling unauthorized access to sensitive files. Organizations using affected versions may face regulatory penalties or data breach notifications.

Mitigation Strategies

Immediately upgrade Postgres MCP Pro to a version that fixes the function-name validation in FROM clauses. Apply least-privilege roles by revoking pg_read_server_files and superuser privileges. Ensure SafeSqlDriver validates all AST nodes, including RangeFunction.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-85620. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart